Re: [Qemu-devel] Live migration - exec: support to be reintroduced?

[Anthony Liguori <anthony@codemonkey.ws>]

Daniel P. Berrange wrote:
> It is useful from a security point of view - it means QEMU doesn't
> need to be given permissions to create files, merely append to an
> opened file handle.
>
> On a related note, Avi pointed out to me that SCM_RIGHTS fd passing
> would be important for NIC hotplug to allow parity with -net arg
> on the command line. If the QEMU process is running unprivileged,
> it will not have rights to create TAP devices & giving it a setuid()
> network script is not desirable. The management app invoking QEMU
> could open the TAP device, and do any setup before passing the FD
> to the NIC hotplug command in the monitor. 
>   

Yup.  If libvirt has a use case for it, then I'm more than happy to 
review patches.

I'm always looking for an excuse to use SCM_RIGHTS :-)

I think the monitor interface could use improvement.  I think it would 
look better as:

(qemu) receivefd /path/to/unix/socket
/* waits until it receives an fd on /path/to/unix/socket */
fd=10
(qemu) closefd 10

Then all of the existing uses of fd= can be preserved.

I like the idea of using a temporary socket because you don't have to 
rely on the monitor being on a unix socket.  This will be especially 
useful when we can support tunneling the monitor through VNC.

Regards,

Anthony Liguori

> Daniel
>